
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
File: hXm-LYNFaC8nrucGK71O92ZOVxs.mft (raw, json)
Hash identifier: ED43RKa8EKFSWCvhXLYBwTlOcNxAE7zMModrs6LlAu8=
Subject key identifier: FF:97:D3:02:08:00:85:5D:54:36:1A:63:16:F8:9E:8E:19:94:38:0B
Authority key identifier: 85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B
Certificate issuer: /CN=A91D0B6B/serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
Manifest number: B5
Signing time: Thu 19 Feb 2026 05:29:39 +0000
Manifest this update: Thu 19 Feb 2026 05:29:38 +0000
Manifest next update: Thu 26 Feb 2026 05:29:38 +0000
Files and hashes: 1: hXm-LYNFaC8nrucGK71O92ZOVxs.crl (hash: VPB158j47emmynNKvBlrDfYp2jdI+KwKlAJJdFOOyHM=)
2: 73DC435A39F511F09F296862C4F9AE02.roa (hash: Svu2JeuZ6CYR5ygmEoE5eVNloQDdE5gMCDtzf/8+0c4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B
Validity
Not Before: Feb 19 05:29:38 2026 GMT
Not After : Feb 26 05:29:38 2026 GMT
Subject: CN=69969fc3-47af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:18:57:33:14:ff:4a:94:77:73:d5:e6:1b:
80:35:49:5b:9b:d0:22:ac:7a:b3:96:5b:fb:6d:c3:
b7:8b:74:45:23:7b:04:b7:ef:1a:13:ea:4a:d2:28:
f4:d0:a0:db:5a:15:6f:71:e7:e8:35:b2:af:53:ba:
ba:4b:51:51:b0:cd:89:4e:9d:db:eb:2f:b1:11:a2:
86:f8:d1:bb:87:61:08:90:23:fe:de:a2:fd:4c:dc:
39:51:98:06:eb:12:22:aa:01:d8:1e:7b:d5:1e:8f:
47:74:dd:36:c1:38:55:d1:c0:4b:02:87:f7:89:96:
98:19:be:07:44:92:f2:f6:99:8f:fd:29:ad:2b:10:
cb:02:a7:f9:7c:d6:8e:40:f9:43:00:1d:ce:ec:f1:
e0:e0:2a:ee:e3:47:c7:c9:b7:db:b0:da:29:08:76:
7b:55:e0:da:da:f6:70:47:cb:59:8a:ec:71:3c:0b:
9b:60:95:f9:1d:c7:15:ee:7a:b0:2f:01:d2:c3:7a:
49:80:fd:13:51:b6:f1:4c:8c:e6:e9:cf:4a:26:89:
5d:1b:7f:5c:57:32:0a:d4:05:bd:f8:41:78:d1:38:
ae:31:f2:98:33:f6:a7:7b:3d:f3:dd:0b:6d:25:b5:
a7:6f:d6:f1:45:04:02:54:ac:ee:5b:7f:2e:ca:ec:
a6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:97:D3:02:08:00:85:5D:54:36:1A:63:16:F8:9E:8E:19:94:38:0B
X509v3 Authority Key Identifier:
keyid:85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ee:c7:5b:c4:bb:76:7f:55:46:8a:56:e0:8e:57:d8:8f:0f:98:
b7:bc:e8:76:0a:cd:5f:6f:30:2f:61:ef:44:4c:b9:89:27:f0:
10:55:2e:06:7c:04:bf:b7:37:c1:2f:e6:5d:e5:43:df:d3:19:
a9:6c:95:ad:ec:4b:65:a2:54:e7:2f:de:78:2a:e1:91:eb:39:
87:5b:9b:1a:97:dd:30:34:ec:17:f9:e4:f8:1b:88:8e:98:66:
43:73:50:8a:e9:bc:24:9a:68:65:81:27:ff:20:61:e2:1f:07:
95:a1:12:b1:34:db:85:29:20:f0:ca:5a:a2:e0:6e:0d:19:37:
25:a0:93:04:27:b6:e2:19:ec:b2:73:39:fc:c2:12:6c:90:ec:
88:97:2a:47:76:87:04:e6:d1:e1:ee:b9:23:34:b3:4a:3f:71:
d0:6f:b9:a1:09:0d:8b:62:b2:04:2a:93:98:b4:c9:2e:fb:f1:
95:92:35:80:4b:71:db:a9:bf:59:42:89:d4:b4:ba:ab:24:de:
de:0f:de:2c:e0:96:50:f4:84:f4:15:29:51:3d:bd:bb:e2:dd:
c2:48:f5:47:80:86:fb:b3:ee:e9:57:89:37:18:36:d8:d9:e8:
c2:5e:4d:eb:23:33:3d:79:6e:be:c9:f7:94:d1:67:d9:ca:9c:
1c:51:16:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:22:35 2026 by rpki-client